Behavioral task
behavioral1
Sample
bc030394a7a9d33462db28b108aba054.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc030394a7a9d33462db28b108aba054.exe
Resource
win10v2004-20240226-en
General
-
Target
bc030394a7a9d33462db28b108aba054
-
Size
1.8MB
-
MD5
bc030394a7a9d33462db28b108aba054
-
SHA1
81c14887c7159916a1101114d4c5e006f4409a88
-
SHA256
0324e3735112f47c513acfbdfb1f92065c35966e1d7206bb54964bcedea45c52
-
SHA512
c4edd0af91fc8bf84636c20aadc06026074af0839b6468032b192ca394c25ac4f944e38af05ae396c1eda7a3e6d1f3158887a3ed3bc456db0952fa0aea68ae35
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqr:SCqm2Jpr0nNM7Dus7Nxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc030394a7a9d33462db28b108aba054
Files
-
bc030394a7a9d33462db28b108aba054.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE